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L (Original) A system ofroute target filtering, comprising: 

an in^ort filter receiving a plurality of routes, the plurality of routes having a next hop 

routing information, ttie import filter accepting a first subset of the routes according to an import 

target policy; and 

a re-export filter receiving the plurality of routes, modifying the next hop information of 
a second subset of the routes, and distributing the modified routes. 

2. (Qrigmal) The system as set forth in claim 1, wherein the re-export filter 
modifies the next hop information to be the address of a router serving as a firewall of a network. 

3. (Original) The system, as set forth in claim 1, wherein the re-export filter 
modifies the next hop information to be the address of a firewall of a virtual private network, 

4. (Original) The system, as set foith in claim 1, wherein the re-export filter 
comprises a mask, a value for comparison with the route, and an action to take in response to a 
match between the route and the comparison value. 

5. (Original) The system, as set forth in claim 1 , wherein the plurality of routes 
each comprises a route distinguisher, a route target, and the next hop information. 

6. (Original) A network, comprising; 
a hub node; 

a plurality of spoke nodes in communications with one another via the hub node; and the 
hub node including: 
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an import Slier receiving a plurality of routes* the plurality of routes having a next 
hop routing information, the import filter accepting a first subset of the routes according 
to an import target policy; and 

a re-export filter receiving the plurality of routes, modifying the next hop infonnation of 
a second subset of the routes, and distributing the modified routes. 

7. (Original) The network, as set forth in claim 6, wherein the re-export filter 
modifies the next hop information to be the address of the hub node. 

8. (Original) The network, as set forth in claim 6, wherein the re-export filter 
modifies the next hop infoimation to be the address of the hub node serving as a firewall for the 
network, 

9. (Original) The network, as set forth in claim 6, wherein the re-export filter 
modifies the next hop information to be the address of the hub serving as a firewall of a virtual 
private network. 

10. (Original) The network, as set forth in claim 6, wherein the re-export filter 
comprises a inask> a value for comparison with the route^ and an action to take in response to a 
match between the route and the comparison value, 

1 1 . (Original) The network, as set forth in claim 6, wherein the plurality of routes 
each comprises a route distinguisher, a route target, and the next hop infoimation. 

12. (Original) The network, as set forth in claim 6, wherein the hub node is a 
customer edge device coupling a site to a provider network. 
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13. (Previously Presented) 



A method comprising: 



receiving a plurality of routes each having a next hop routing information; 
accq>ting a first subset of the plurality of routes according to a predetennined policy; 
modifying the next ho information of a second subset of the plurality of routes; and 
distributing the modified routes, 

14. (Original) The method, as set forth in claim 13, wherein modifying the next 
hop information comprises modifying the next hop inforaxation to be the address of a router 
serving as a firewall of a network. 

15. (Original) The method, as set forth in claim 13, wherein modifying the next 
hop information comprises modifying the next hop information to be the address of a firewall of 
a virtual private network. 

16. (Original) The method, as set forth in claim 13, wherein the re-export filter 
comprises a mask, a value for comparison with the route^ and an action to take in response to a 
match between the route and the comparison value. 

17. (Original) The method, as set forth in claim 13, wherein receiving ih& 
plurality of routes con^rises receiving a route distmguisher, a route target, and the next hop 
infonnation. 



Page 4 

PA(X8I11'RCVDAT1II/18/20066:36:36PM [Eastern ^^^^ 



